Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144781.roa
File:                     AS144781.roa (raw, json)
Hash identifier:          hQnqneBV+KB+rqX8UBOx4DO73Ax1OENND0CR/fV1oCU=
Subject key identifier:   84:76:8E:21:27:98:04:54:6A:52:02:5F:1A:09:A7:E0:F2:33:15:1C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1BDD3EF69ED4CBB45612AD9057BD2509C7745FA1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144781.roa
Signing time:             Fri 22 May 2026 02:47:34 +0000
ROA not before:           Fri 22 May 2026 02:42:34 +0000
ROA not after:            Fri 21 May 2027 02:47:34 +0000
asID:                     144781
IP address blocks:        240a:a853::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:dd:3e:f6:9e:d4:cb:b4:56:12:ad:90:57:bd:25:09:c7:74:5f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:34 2026 GMT
            Not After : May 21 02:47:34 2027 GMT
        Subject: CN=84768E21279804546A52025F1A09A7E0F233151C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:65:20:0a:a6:e7:4a:09:07:dd:f4:9d:4c:37:
                    f7:79:08:c8:dc:92:f3:d6:ce:6f:e4:f5:10:be:d7:
                    ef:dc:7b:93:9d:2d:00:ff:50:bb:42:1e:47:ef:8c:
                    07:28:c9:bc:bc:11:48:76:b7:cf:75:46:90:8e:7b:
                    7d:c4:32:4e:c8:96:3a:15:64:78:1a:71:fd:89:fa:
                    e6:31:b8:52:59:81:ba:cd:aa:33:39:b7:93:18:01:
                    b6:1e:21:8e:55:db:73:ad:d2:9e:f4:e5:7f:b8:6e:
                    5b:01:95:78:d3:2b:e6:d7:8b:1e:79:ac:3d:be:72:
                    d1:19:c8:51:f4:3f:37:0f:e5:2c:ad:96:1f:c8:37:
                    62:bf:f8:79:f3:c8:1e:4c:aa:5a:fa:25:df:c6:12:
                    79:3e:0a:4d:96:98:51:ed:f3:2e:86:75:2c:87:b1:
                    83:c3:13:00:a1:c0:b6:74:9b:34:8a:98:7c:88:55:
                    ca:e0:a8:90:66:ce:60:54:85:19:a9:b8:32:2e:a4:
                    61:57:e4:48:86:92:56:9b:c1:dd:ae:1e:b0:59:0e:
                    e1:f7:94:82:4f:23:3d:a3:71:ee:eb:cf:ed:f8:93:
                    bb:ed:e6:ad:30:7b:6a:2f:1d:8c:2c:5c:fb:a3:71:
                    5e:7e:c4:12:83:34:30:55:19:64:b9:eb:7c:3c:ab:
                    b4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:76:8E:21:27:98:04:54:6A:52:02:5F:1A:09:A7:E0:F2:33:15:1C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144781.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a853::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:0c:7d:d2:41:e8:1c:d9:7f:16:2c:39:4c:66:7b:16:16:7f:
         2b:f8:0a:e4:7c:87:12:39:4c:dd:b9:23:b4:30:bf:68:c8:f8:
         cd:fc:70:67:1f:e0:6c:14:a9:ab:b3:a2:22:5c:2d:83:e7:c5:
         0c:43:8b:ca:db:a5:a6:f9:d7:51:55:b7:89:3d:14:37:55:8a:
         6a:b7:86:ad:00:09:4f:39:1a:a8:73:7d:74:74:43:d8:b5:d9:
         02:7d:f0:f3:af:59:12:fc:1b:d4:1e:ba:3f:0e:b2:50:a6:26:
         10:51:f6:61:f9:e9:0a:fc:93:3b:10:84:06:7d:83:c4:69:f4:
         91:63:a0:d1:2e:06:cc:98:b6:4a:49:8f:73:7d:7f:03:ed:40:
         74:d0:81:70:e6:cf:80:f7:77:9e:10:41:61:1b:bc:c2:73:44:
         76:e9:e6:c6:e9:bb:87:36:80:f5:5f:e4:22:0f:32:73:81:9e:
         02:a2:29:87:cd:bf:2a:82:c3:a5:78:87:c9:41:49:90:4c:9d:
         fd:26:d1:7a:13:9b:94:11:15:6a:b4:7e:a1:22:e5:7b:99:47:
         80:53:18:a7:42:86:67:80:45:9c:98:ae:1d:3b:07:62:e0:56:
         59:87:c4:4e:a7:ed:ea:15:61:1e:84:09:45:9d:d4:b3:b2:59:
         a8:3b:9b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----